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DETAILED ACTION 

Response to Amendment 

1 . This office action is in response to the amendment filed 04/22/09. Claims 1 , 6, 
13, 15-19 have been amended; claim 22 has been added. The specification has also 
been amended. 



Response to Arguments 

2. Applicant's arguments, see Remarks, page 9, with respect to the objection to the 
specification as failing to provide proper antecedent basis for the claimed subject matter 
have been fully considered and are persuasive. The amended specification has 
overcome the objection, and the objection has been withdrawn. 

3. Applicant's arguments, see Remarks, page 10, with respect to the rejection of 
claims 1-6, 8-12 and 21 under 35 U.S.C. 101 as not falling within one of the four 
statutory categories of invention have been fully considered and are persuasive. The 
amended claims have overcome the objection, and the rejection has been withdrawn. 

4. Applicant's arguments, see Remarks, page 10, with respect to the rejection of 
claims 13 and 15-19 under 35 U.S.C. 101 as failing to be limited to embodiments which 
fall within a statutory category have been fully considered and are persuasive. The 
amended claims and specification have overcome the rejection, and the rejection has 
been withdrawn. 
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5. Applicant's arguments with respect to claims 1 -6, 8-9, 11-13, 1 5-1 6 and 1 8-21 
are rejected under 35 U.S.C. 102(e) as being anticipated by Leser et al. (2005/0028006) 
have been considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

7. Claims 1-6, 8-9, 11-13, 15-16, 18-19 and 21-22 rejected under 35 U.S.C. 102(e) 
as being anticipated by Dutta et al. (US 7,035,910). 

8. Regarding claim 1 , Dutta discloses a method for limiting access to an electronic 
document (Abstract) comprising: 

associating an identifier to the process-driven security policy having a plurality of 
states, with each of the states having a different set of access restrictions (i.e., 
associating the name of a document "Foo.doc" to a publishing workflow having various 
states - Create, in-Review, in-Approve and Approved - each state having a different set 
of access restriction to the document) (figures 4-5; col. 2, lines 34-45; col. 8, lines 35- 
62); 



Application/Control Number: 10/677,049 Page 4 

Art Unit: 2432 

making the identifier available to certain of users or groups of users (putting the 
document in the public folder) (fig. 5, element 518); 

associating the electronic document with at least one of the states of the 
process-driven security policy to impose access restrictions on an electronic document 
(i.e., the document is in the Create state and there are certain access restrictions 
associated with the Create state) (fig. 4, element 220; fig. 5, element 220; col. 8, line 63 
-col. 9, line 16); and 

changing the state of the process-driven security policy for the electronic 
document automatically without user or administrator interaction in response to an 
internal or external system event, wherein the changed state is based on a transition 
rule associated with the event (i.e., in the Create state, the owner of the document 
checks out the document, works on the document, and then performs a check-in 
operation which invokes the publishing workflow to change the state of the document to 
the in-Review state) (fig. 4; col. 7, lines 1-29; col. 9, lines 17-29). 

9. Regarding claim 2, Dutta further discloses that the identifier is a classifier (i.e., 
the document name includes a document type classifier ".doc") (fig. 5, element 51 8). 

1 0. Regarding claim 3, Dutta further discloses that the process-driven security policy 
is provided as part of a document security system (col. 2, lines 14-22). 

1 1 . Regarding claim 4, Dutta further discloses that the identifier is assigned to a 
document when the document is created (i.e., naming the document) (fig. 5, element 
518). 
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12. Regarding claim 5, Dutta further discloses creating a plurality of electronic 
documents and assigning the identifier to each of the created documents (i.e., creating 
multiple working copies of the document) (fig. 5, element 520). 

1 3. Regarding claims 21-22, Dutta further discloses that the event is a user-trigger 
event and occurs at the client machine (i.e., the user performs a check-in operation) 
(col. 7, lines 17-19; col. 9, lines 17-20) 

14. Regarding claim 6 representative of claim 13, Dutta discloses a method for 
imposing access restrictions on an electronic document (Abstract), comprising: 

associating an electronic document with at least one of the states of a process- 
driven security policy to impose access restrictions on an electronic document, each of 
the states having a different set of access restrictions, the access restrictions being 
dependent on the at least one of the states of the process-driven security policy (i.e., 
associating a document to Create state of a publishing workflow having various states: 
Create, in-Review, in-Approve and Approved, each state having a different set of 
access restriction to the document) (fig. 4, element 220; fig. 5, element 220; col. 7, lines 
1-16; col. 8, line 63 -col. 9, line 16); and 

subsequently changing the state of the process-driven security policy for the 
electronic document automatically without user or administrator interaction in response 
to an internal or external system event, wherein the changed state is based on a 
transition rule associated with the event (i.e., in the create state, the owner of the 
document checks out the document, works on the document, and then performs a 
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check-in operation which invokes the publishing workflow to change the state of the 
document to the in-Review state) (fig. 4; col. 7, lines 17-19; col. 9, lines 17-20). 

1 5. Regarding claims 8-9 and 1 5-1 6, Dutta further discloses that the event is a user- 
trigger event and occurs at the client machine (i.e., the user performs a check-in 
operation) (col. 7, lines 17-19; col. 9, lines 17-20). 

16. Regarding claims 1 1 and 18, Dutta further discloses that the method is 
performed on a plurality of documents on a document-by-document basis (i.e., used in a 
document publishing environment for publishing documents) (col. 1, lines 6-25). 

1 7. Regarding claims 1 2 and 1 9, Dutta further discloses that each of a plurality of 
electronic documents is in one of the states of the process-driven security (figure 5). 

Claim Rejections - 35 USC § 103 

18. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 9. Claims 1 0 and 1 7 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Dutta as applied to claims 6 and 13 above, and further in view of Martin et al. 
(2003/0217264). Dutta does not disclose that the electronic document includes security 
information, and the security information includes an indication of the state of the 
process-driven security policy for the electronic document. Martin discloses a method 
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and system for protecting electronic document using a process-driven security policy, 
i.e., state-based access control policy, wherein the electronic document is processed by 
a user at one state of a workflow and then transferred to another user at the next state 
of the workflow (Abstract; fig. 1 , elements 8-9; paragraph 001 5). Martin further 
discloses that the electronic document includes a signature of the document signed by 
the user at each state before the signed document is transferred to the next state (fig. 4, 
steps 70-72; paragraph 0022). It would have been obvious to one of ordinary in the art 
at the time the invention was made to modify Dutta method such that the electronic 
document includes a signature of the document signed by the user at each state before 
the signed document is transferred to the next state, as taught by Martin. Using the 
signature, the user at the next state would be able to verify that the electronic document 
had not been altered from the time the user at the previous state signed the electronic 
document (paragraph 0022). 



Double Patenting 

20. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 
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A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

21 . Claim 6 is provisionally rejected on the ground of nonstatutory obviousness-type 
double patenting as being unpatentable over claim 22 of copending Application No. 
10/676474. Although the conflicting claims are not identical, they are not patentably 
distinct from each other because, with one exception, all of the limitations in the instant 
claims are present in the corresponding claims of Application '474. The one exception 
is that whereas the instant claims use a process-driven security policy, the '474 claims 
use a reference to the process-driven security policy, However, having a reference to an 
object (e.g., a pointer, link, URL, etc.) is functionally equivalent to having the object 
itself. Therefore, using a reference to an object is an obvious variation of using the 
object itself, and is not a patentable difference between the two set of claims. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

Conclusion 

22. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH DINH whose telephone number is (571 )272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Minh Dinh/ 
Examiner, Art Unit 2432 



08/16/09 



